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(57) Abstract 

The invention relates to a method 
j for verifying encrypted data being ex- 
pressive of a configuration of a computer 
system, said computer system or a com- 
ponent thereof having an identifier, said 
method comprising the steps of encoding 
said data by an encoding method using 
said identifier as a key, encrypting said 
encoded data by an encryption method 
using a private key. For the decryption 
of the data a public key is used, prefer- 
ably according to the RSA crypto sys- 
| tern. The invention may also be used 
to enable functional characteristics of a 
computer system selectively. 
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DESCRlp TION 
Hethod for ver1fyln9 the conf)gurat , on of a cmputer syjtOT 

The invention relates to a method for verifying of a 
Zl 9 t Uratl0n °* to a method for 

out sucn : m to a computer *« «™ 

and verification purposes. There have been £or 
many years password generators £ or « PIN p * 7 
used to na ir = N * P1Ns hav © been 

used to gaxn access to automated tellers fl „n o 

w et al granted Jan 17 lono r»-r«r, 

may be generated automatically and m av h * 

~ number 9enerato ~ « -^i^ir-sr - by 

only over a 3 Bin „ t . algorithm is valid 

y over a 3 minute window. However the i« i. 
of a computer system e a th* h T ° r Unl ° Ck 

does not satisfy nelds whic h a ° f V * U9han 

It doesn't deal w^k posslbl « to achieve, 

sn t deal with repetitive modification 

processing system. These technique, often utilises 
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secret: "key" or "password" entered by a user and 
recognized within the data processing system as an 
indication of the user's ability to read, write, delete, 
copy or append a selected record. One example of such a 
system is disclosed in U.S. Pat. No. 4,799,258. Further, 
several known techniques exist for storing such "keys," 
"passwords" or other secure data within secure storage 
devices within a data processing system. For example, 
U.S. Pat. No. 4,949,927 discloses a method for providing 
a security module for physically protecting such 
sensitive data. Similarly, U.S. Pat. No. 4,759,062 
discloses a method for protecting sensitive data, such as 
private security codes . 

Each of the methods described above permits the storage 
and utilization of sensitive or private data; however, 
none of these publications teaches a technique whereby 
the functional characteristics of a data processing 
system may be selectively altered. Systems do exist for 
enabling or disabling electronic equipment utilizing 
"keys" or other similar devices. Primarily such systems 
are directed to enabling or disabling reception of 
television or CATV signals within a television receiver. 
For example, see U.S. Pat. Nos. 4,577,224 and 4,471,379. 

From US-A-5 200 999 a public key cryptosystem key 
management based on control vectors is known. This serves 
for encrypting the public and private keys of a 
cryptographic asymmetric key (public key) algorithm, when 
these keys are stored outside the secure boundary of the 
cryptographic facility (i. e., cryptographic hardware) 
and for decrypting these keys when they are processed or 
used within the secure boundary of the cryptographic 
facility. The encrypted keys may be kept in a 
cryptographic key data set belonging to the cryptographic 
system software or they may be managed by the 
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cryptographic application programs that use the keys *». 

cut* priv r ksys are encrypted ty * - - 

tZ ™! " f0rn Withi " the secure boundary of 

the cryptographic facility. 

US-A-4 90S 861 discloses a data authentication method 
using modification detection pedes based on a public one 
way encryption function. According to this method a 
message of arbitrary length is transformed into a block 
(LTltr 9 ^ de " ned " 0di "«"°" action code 

"hicn result in the same MDC, because the MDC is a «,,„„ 
to-one function of the inout i,- V " 
n^^^- ">PU«-/ it is required that it is 

practically not feasible for an opponent to find them in 

t^Tat't" r th r S ' 3 - — between ^ 

sy^em? ! ' ' iMiderS (Wh ° have '° the 

system) and outsiders (who do not) . 

From TDB No. 11. Anril iooo 

of a certain co' ' 3?6 " 383 the s °^tion 

«JL concurrence related to the RSA public key 

cryptosystem is addressed Th« ^ , F xey 

cryptosystem is knoTf™ T ^'lTl T b ^ 

pages 413 ' " 10 ' °"ober 1993, 

Pages 413 - 416 a protocol is disclosed for one-wav 
authentication in the asymmetric model. !„ th^s protocol 

L p t r ro7r inces a verIfi « th " «- ^TLZTT' 

"T m l llZ 9 l C 7 P ° Site nXmb °* ™° — does this 
•> a way that it does not reveal the factors of N Thi* 

Protocol is useful for the software llcensi^^blL 
In electronic design, Aprl i 17/ 
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In US-A-5 365 587 a system is disclosed for selectively 
altering the functional characteristics of a data 
processing system without physical or mechanical 
manipulation by providing an access code from a remote 
personal identification number generator to a secure 
controller and store of the computer system. This enables 
remote authorization of change in function of the 
computer system, such as performance tune up, speeding 
clock time, changing function and like changes. The 
computer system is first manufactured having a 
predetermined set of functional characteristics. A 
multibit alterable code which includes a functional 
characteristic definition is then initially loaded into 
physically secure, nonvolatile memory within the data 
processing system, utilizing an existing bus, or a 
fusible link which may be opened after loading is 
complete. The functional characteristic definition is 
loaded from nonvolatile memory into a nonscannable 
register within a secure portion of a control logic 
circuit each time power is applied to the data processing 
system and the definition is then utilized to enable only 
selected functional characteristics . Alternate functional 
characteristics may thereafter be selectively enabled by 
entering a security code which matches one of a number of 
preloaded codes and an encoded alternate functional 
characteristic definition. The alternate functional 
characteristic definition may be enabled on a one-time, 
metered, or regularly scheduled basis and variable 
capability data processing systems may be implemented in 
this manner utilizing a single manufactured system, 
without the necessity of manufacturing and storing 
multiple data processing system models. 

In summary, the prior art is silent as to the usage of 
encryption techniques to verify the configuration of a 
computer system. 
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The underlaying problem of the invention is to provide a 
method for verifying of a configuration of a computer 
system, a method for encryption of data being expressive 
of a configuration of a computer system and a computer 
system for carrying out such a method. 

The problem of the invention is solved by the features 
laad down in the independent claims. 

Data which is expressive of the configuration of a 
computer system advantageously is encrypted during 
manufacturing of the computer system. This is done by 
using an identifier which is assigned to the computer ^ 
system or a component thereof during manufacturing. The 
private key which is used for the encryption of the 
encoded data is only known to the manufacturer of the 
computer system. 

™ S RS .^ Cr r ptos y stem Preferably is used for encryption of 
the encoded data (cf . r. l. Rivest, A. Shamir and L. 
Adleman "A Method for Obtaining Digital Signatures and 
Publac-Key Cryptosys terns", Communications of the ACM, 
February 1978, Vol. 21, No . 2>. For encoding the data by 
means of the identifier, the identifier can for example 
sxmply be added to the data. For decoding the identifier 
is subtracted later on from the encoded data. Also the 
DES method can be used whereby the identifier of the 
computer system is employed as a secret key (cf. Cheryl 
Ajluni, "Security Techniques Ensure Privacy", Electronic 
Design, April 17, 1995, page 98). 

The encrypted data can be stored in any kind of storage 
device of the computer system, for example on an EPROM or 
on a diskette. The encrypted data can already be stored 
in the computer system during manufacturing. However, it 
is also possible to transmit the encrypted data to the 
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computer system via a telephone line, ISDN or other 
telecommunication means when the computer system is 
already installed at the customer. This is advantageous 
if the configuration of the computer system is changed. 
Than a new set of encrypted data reflecting the changed 
configuration of the computer system is transmitted and 
stored on the storage device of the computer system. This 
saves a service engineer of the manufacturer of the 
computer system from travelling to the customer side in 
order to change the encrypted data according to the new 
configuration. 

Once the encrypted data is stored on a storage device of 
the computer system, the encrypted data is used for 
verifying the configuration. This serves to protect the 
computer system against unauthorized changes of its 
configuration. This can be a requirement for technical 
reasons or can serve as asset protection for the 
manufacturer of the computer system. 

The first step for verifying the configuration is to 
receive the encrypted data. This is accomplished by 
reading the encrypted data from the storage device of the 
computer system on which the encrypted data has been 
stored during manufacturing or by receiving the encrypted 
data via a telecommunications link directly from the 
manufacturer. Than the encrypted data is decrypted, 
preferably using a public key of the RSA crypt osys tern. 
This yields the decoded data which has been encoded by 
means of the identifier. The identifier is available in 
the computer system, preferably in electronically 
readable form* For example, the identifier can be stored 
in one of the components of the computer system by a 
number of fuses which are blown according to the 
identifier of that component. This identifier can also 
serve as an identifier for the entire computer system. In 
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ITrL nt the CIOWnin9 ot the co »P" ter 

another computer system having another identifier, the 
identifier has to be unchangeable. This can be guaranteed 
*y storing the identifier In a component of the computer 
syste which is exclusively produced by the manufacture 

identif Sy " am - " 18 BlSO that the 

I"' " r " Unique " H °— - solute uniqueness Is 
normally not retired. If for example every thousandth 
computer system which is manufactured by the same 
manufacturer has an identical identifier, this would be a 
sufficient degree of security. 

atll " US £ ° r thS e "=° d ^9 «>d decoding of the 
data than this yields the data which is expressive of the 
configuration of the computer system stored during 
manufacturing. The configuration data of the compter 

zm: i 1 : aiso stored ° n * at °"*° °* 

IZt T UnenCOded fo ™- ™«se configuration data are 
compared to the decoded data „ , K 

the decoded data and It " * m " Ch bet »«°» 

this JIT J? unencoded configuration data 

this means that the customer is authorized to use this 
configuration of the computer system. Preferably! this 
-thod for verifying of the configuration is carried out 
£ means of microcode every time the computer system 2 



Tt is "I V " ln " Md ° f deC ° din 9 the ^crypted data - 

which ^tT^T" t0 enC ° de ~»"°u«tion data 

Ind to" in M enCOded fOIn in «» <=°»P"t« system 

and to compare the encoded data with the encoded 

configuration data. 

bos^H, data and ^ """^"ion data do not match it is 
Possible not to enable or to disable the entire syst™ 

An alte-rri^*- * . ^ UALts system, 

alternative is to enable the computer system only 
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insofar as the data and the configuration data match. 
This can be advantageous in the following scenario: A 
customer is assumed to have purchased a memory expansion 
card for the computer system from a third party which is 
not authorized by the manufacturer of the computer system 
to deliver such memory expansion cards. The memory 
expansion card is inserted into the computer system and 
the configuration data which is normally stored on a hard 
disk of the computer system is changed correspondingly. 
This change of the conf iguration data can be carried out ' 
easily since the configuration data is present in the 
computer system in an unencoded and unprotected form. 
However/ when the computer system is booted the encrypted 
data which is provided by the manufacturer of the 
computer system is decoded and decrypted and subsequently 
compared to the unencoded configuration data. In the 
example considered here the data and the configuration 
data match with the exception of the memory expansion 
card. As a consequence this memory expansion card is 
ignored and the computer system is initialized during the 
booting procedure so that the memory expansion card is 
not addressable* This can also be done with other 
functional characteristics of the computer system, such 
as the cycle time. A method for selectively altering the 
functional characteristics as such is known from US-A-5 
365 587. 

In order to circumvent the method for verifying of a 
configuration of a computer system a third party could 
analyze the microcode which serves to carry out this 
method and find a way to bypass the corresponding 
portions of the microcode. This can be prevented if the 
microcode is also protected against tampering. This can 
be accomplished for example by special check sums of the 
microcode which are predefined and checked by a special 
routine periodically. From IBM Technical Disclosure 



WO 97/07463 




PCI7EP95/03186 



Bulletin, No. 9, February 1992, pages 188 - 191 a 
mechanism for Trusted Computing Base definition and 
checking is known which could also be used to prevent a 
third party from altering or bypassing the microcode. 

One way of carrying out the invention is described in 
detail below with reference to drawings which illustrate 
only one specific embodiment, in which: 

Fig. l is a flow chart illustrating the method for 
encryption of data; 

Fig. 2 is a flow chart illustrating the method for 

verifying of the configuration of the computer 
system; 

Fig. 3 is a flow chart illustrating an alternative 
method for verifying of the configuration of 
the computer system; and 

Fig. 4 is a schematic block diagram of a computer 

system which may be utilized to implement the 
method and system of the present invention. 

In step l of the flow chart shown in Fig. l the 
configuration of the computer system is defined by the 
manufacturer of the computer system. This results in data 
which is expressive of the specific configuration of the 
computer system considered here. In step 2 a unique and 
unchangeable identifier of the computer system is 
defined. The identifier is stored in a portion of the 
computer system where it is protected against tampering. 
In this example the identifier is stored on the clock 
chip of the computer system which is a specialized card 
which can not be produced or delivered by any third 
party. The clock chip is personalized by blowing a number 
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of fuses according to the identifier. The identifier is 
used in step 3 to encode the data which is expressive of 
the configuration of the computer system. This is 
accomplished - in the prefered embodiment considered here 
- by simply adding the identifier which is assumed to be 
a string of binary data to the data which is expressive 
of the configuration. Any algorithm using the identifier 
as a key could be used for encoding of the data, if the 
identifier can also be used for decoding of the encoded 
data according to the algorithm. 

In step 4 the private key required for the encryption 
algorithm is fetched. Subsequently, the encoded data is 
encrypted in step 5 by means of the private key. The 
resulting encrypted data of step 5 is stored in the 
computer system in step 6 for example in an EPROM of the 
computer system. 

When the computer system is booted on the customer site 
this result of the encryption of step 5 is outputted by 
the EPROM (step 7). Then the public key which is required 
for decryption of result is fetched from the hard disk of 
the computer system. In step 9 the decryption of the 
result is carried out by means of the public key. In step 
10 the identifier is read from the clock chip of the 
computer system. The result obtained by the decryption of 
step 9 is decoded by means of the identifier in step 11. 
In the example considered here this is accomplished by 
subtracting the identifier from the result obtained in 
step 9. 

In step 12 the configuration data is read from the hard 
disk of the computer system. The configuration data is 
compared to the result of step 11 in step 13. if there is 
a perfect match the booting procedure normally continuous 
and all the hardware is enable as defined by the 
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configuration data in step 14. If there is no perfect 
match one possibility is to simply stop the booting 
procedure so that the entire computer system is not 
usable (step 15). Another possibility is to selectively 
enable the functional characteristics of the computer 
system insofar as there is a match between the result 
obtained in step 11 and the configuration data read in 
step 12. 



Fig. 3 shows an alternative way of carrying out the 
method illustrated in Fig. 2. In step 16 of Fig. 3 the 
result obtained in step 6 is outputted from the EPROM of 
the computer system. The following steps 17 and 18 of 
Fig. 3 corresponds to the steps 8 and 9 of Fig. 2 and 
serve to decrypt the result which was outputted in step 
16. . . * 

In step 19 the configuration data is read from the hard 
disk of the computer system. Step 19 in Fig. 3 
corresponds to step 12 in Fig. 2. Subsequently the 
configuration data which is read in Fig. 19 is encoded in 
step 21 by means of the identifier which is fetched from 
the clock ship in step 20. The results of the decryption 
of step 18 and the encoding of step 21 are compared in 
step 22. Based on the comparison carried out in step 22 
it is decided in step 23 whether the decrypted data of 
step 18 and the encoded data of step 21 match, if there 
is a match step 24 is carried out which corresponds to 
step 14 of Fig. 2. If there is no match step 25 is 
carried out which corresponds to step 15 of Fig. 2. 

For an overview of the computer system, the data 
processing system which can be selectively altered for 
functional characteristics without physical or mechanical 
manipulation, refer to Fig. 4. Fig. 4. depicts a high 
level block diagram of a data processing system which may 
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be utilized to implement the method and system of the 
present invention. As illustrated, the data processing 
system includes a computer 26 having a data link 27 and 
an operator console 28 coupled in a manner well known in 
the art. Many of the high level components within 
computer 26 are depicted within Fig. 4 including main 
store 29, which serves as the main electronic storage 
within computer 26, and a central electronic complex 30 
is also depicted. As will be explained in greater detail 
herein, central electronic complex 30 may include 
multiple multi chip modules which serve to perform the 
various functions of the central electronic complex, or 
alternately, central electronic complex 30 may be 
provided with a single high density circuit and including 
integrated circuit devices equivalent to several million 
transistors. 

A service processor 31 is provided and is preferably 
coupled between operator console 28 and central 
electronic complex 30 to provide access to the functions 
and circuitry therein. A power supply 32 and input/output 
channels 33 are also typically provided in such a 
computer system, as those skilled in the art will 
appreciate . 

stl11 referring to Fig. 4, the high level segments of 
central electronic complex 30 are illustrated. In a 
modem main frame computer such as the International 
Business Machines Corporation System/390 the central 
electronic complex typically includes 1 or more multiple 
chip modules which serve to address various functions 
within a central electronic complex. As illustrated 
within Fig. 4, central electronic complex 30 includes an 
SC module 34 which preferably serves to buffer and 
control the flow of data between main store 14, 
input/output module 35 and various processes within 
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computer 26. Input/output module 35 preferably serves to 
control and buffer data between input/out channels 33 and 
mam store 29 in a manner well known in the art 
Similarly, B-module 36 is provided to buffer and control 
instructions and data for the processor and CP-module 37 
serves to execute instructions within computer 26. As 
those skilled in the art will appreciate, each of these 
multi chip modules 34, 35, 36 and 37 constitutes a highly 
complex electronic module which may include more than 100 
integrated circuit devices, each equivalent to thousands 
or millions of transistors. 

Additionally, as those skilled in the art will 
appreciate, a translation look aside buffer ( TLB) is also 
provided and is utilized, in a manner well known in the 

addr/ 0 tranSlatS VirtUal rae ™~y Address into real memory 
addresses within main store or other locations within 
computer 26. 

Mainframe computers such as the International Business 
Machines Corporation System/390 may include multiple 
levels of functional capability which may be provided by 

a llltT T* ran?e ° f mSm0ry th3t ™* be a — d within 
a particular computer system, the number or percentage of 
processors which are enabled within a particular 
computer, the amount of usable cache memory within a 
particular computer and the processors speed and/or 
capability provided within a particular computer. Thus, 

functr ^ 9 K C ° mPUter 26 With ^ of all these 

functional characteristics during the manufacturing 
process a selected subset or variations of those 
functional characteristics may be enabled utilizing the 
method and system of US-A-5 365 587. 

Furthermore, the computer 26 comprises a clock chip 39 
having the identifier stored therein by means of a number 
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of fuses. The identifier is unique, unchangeable and 
electronically readable by the service processor 31 to 
which the clock chip 39 is connected. The computer system 
shown in Fig. 4 further comprises a hard disk 38. The 
hard disk 38 serves to receive the encrypted data which 
is encrypted according to the method of the invention. 
The encrypted data can be stored on the disk 38 during 
manufacturing. If the configuration of the computer 
system is changed a new set of encrypted data can be 
stored on the disk 38 on the customer site. It is also 
possible to input the updated encrypted data via the 
channels 33 into the computer 26 and to store the updated 
encrypted data on the disk 38 under the control of the 
service processor 31. Every time the computer system 
depicted in Fig. 4 is booted the service processor 31 
accesses the disk 38 in order to read the encrypted data. 
The service processor 31 also accesses the disk 38 to 
read the public key needed for decryption according to 
the RSA method. The decryption of the encrypted data read 
from the disk 38 is carried out by the service processor 
31 whereby usage is made of the public key. When the 
service processor 31 accesses the clock chip 39 in order 
to read the identifier. 

Subsequently, the service processor 31 decodes the 
decrypted data and compares the result with the actual 
configuration data stored in unencrypted form on the disk 
38. Alternatively the service processor 31 is programmed 
to encode the actual unencrypted configuration data by 
means of the identifier in order to compare the decrypted 
data and the encoded actual configuration data. 

In response to the comparison carried out in service 
processor 31 the computer system is enabled according to 
the actual configuration data if a perfect match occurs* 
The selective enabling of functional characteristics of 



WO 97/07463 



# 

- 15 - 



PO7EP95/03186 



the computer system 26 advantageously is carried out 
according to the method disclosed in US-A-5 365 587. if 
the comparison carried out by the service processor 31 
reveals that there is no perfect match this can cause the 
interruption of the booting procedure so that the entire 
computer system is disabled. Alternatively only those 
functional characteristics of the actual configuration 
data stored on disk 38 which match the encrypted data are 
enabled selectively. 

It is also possible to program the service processor 31 
to carry out the method of the invention not during the 
initialization of the computer system 26 but during 
normal operation. If a mismatch occurs this can lead to a 
shut down of the entire computer system 26. 
Alternatively only those features of the computer system 
which correspond to configuration data which do not match 
the decrypted configuration data are disabled. 
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CLAIMS 



1. A method for encryption of data being expressive of 
a configuration of a computer system, said computer 
system or a component thereof having an identifier. 



a) encoding (3) of said data by an encoding 
method, said encoding method using said 
identifier as a key; 

b) encrypting (5) of said encoded data by an 
encryption method, said encryption method using 
a private key. 

2. A method for verifying of a configuration of a 

computer system, said computer system or a component 
thereof having an identifier, said method comprising 
the steps of 

a) receiving (7) of encrypted data being encrypted 
according to the method of claim 1; 

b) decrypting (9) of said encrypted data using a 
public key; 

c) decoding (11) of said encoded data using said 
identifier as a key; 

d) comparing (15) said data with configuration 
data stored in said computer system. 

3. A method for verifying of a configuration of a 

computer system, said computer system or a component 
thereof having an identifier, said method comprising 
the steps of 



said method comprising the steps of 
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a) 



receiving (16) of encrypted data being 



encrypted according to the method of claim 1; 

b) decrypting (18) of said encrypted data using a 
public key; 

c) encoding (21) of configuration data stored in 
said computer system by an encoding method , 
said encoding method using said identifier as a 
key; 

d) comparing (22) said encoded data with said 
encoded configuration data. 

4 • Method according to any one of the preceding claims 
wherein said encryption method is the RSA method. 

5. . Method for selectively enabling of functional 

characteristics of a computer system, said computer 
system or a component thereof having an identifier , 
said method comprising the steps of 

a) verifying a configuration of said computer 
system by a method for verifying according to 
anyone of the claims 2, 3 or 4; 

b) enabling of a functional characteristic of said 
computer system if said data and said 
configuration data match as regards said 
functional characteristic . 

6 . Method according to claim 5 said functional 
characteristic being a cycle time or an amount of 
memory addressable. 
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7* A computer system comprising means for carrying out 
a method according to anyone of the preceding 
claims . 

8. A computer system comprising 

means (38) for reception of encrypted data being 
encrypted according to the method of claim 1, 

means (31) for decryption of said encrypted data, 
said means for decryption being adapted to use a 
public key, 

means (31) for decoding said encoded data, said 
means for decoding comprising means for accessing 
said identifier, and 

means (31) for comparing said data with 
configuration data stored in said computer system. 

>. A computer system comprising 

means (38) for reception of encrypted data being 
encrypted according to the method of claim 1, 

means (31) for decryption of said encrypted 

data, said means for decryption being adapted to use 

a public key, 

means (31) for encoding of configuration data stored 
in said computer system, said means for encoding 
being adapted to use said identifier as a key, 



means (31) for comparing said encoded data with said 
encoded configuration data. 
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10. Computer system according to claim 7, 8 or 9 further 
comprising means for selectively enabling of a 
functional characteristic of said computer system. 
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